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DETAILED ACTION 

1 . This action is in response to the Request for Continued Examination (RCE) filed 
05 February 2007. 

Claim Rejections - 35 USC§ 103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 1, 4, 5, 8, 12-21, and 23 rejected under 35 U.S.C. 103(a) as being 
unpatentable over Bell et al. (U.S. 5,223,827) hereinafter referred to as Bell in view of 
Andersen (U.S. 6,434,715 B1) and Vaid et al. (U.S. 6,502,131 B1) hereinafter referred 
to as Vaid. 

a. Regarding claims 1,21, and 23, Bell teaches: receiving network 
management data relating to an event condition (lines 15-24 of column 1 and line 56 of 
column 3 through line 5 of column 4); adding a normal event log entry to the event log 
display, the normal event log entry corresponding to the event, when the number of 
preceding equivalent events is less than a predetermined number in a preceding time 
period (line 15 of column 1 through line 12 of column 2). 

Bell does not explicitly teach: adding a recurring event log entry to the event log 
display, the recurring event log entry corresponding to the event, when (i) the event 
does not already have recurring event status and (ii) the number of preceding 



Application/Control Number: 09/897,518 Page 3 

Art Unit: 2142 

equivalent events is greater than the predetermined number in the preceding time 
period. However, Andersen discloses: "A limit may be set as to how many repeats 
should be observed before a repeat event/message is generated. Similarly a limit may 
be programmed in as to how many repeat events/messages should be generated 
regardless of the number of observations made. This information may be displayed at 
the trip unit 30 or at a central computer (not shown). This may be displayed (or printed) 
in the form of a log or by type of event along with the number of repeat events, the time 
since the prior event occurrence and/or the frequency of such event occurrences," (lines 
58-67 of column 3). It would have been obvious for one of ordinary skill in the art at the 
time of the applicant's invention to add a recurring event log entry to the event log 
display, the recurring event log entry corresponding to the event, when (i) the event 
does not already have recurring event status and (ii) the number of preceding 
equivalent events is greater than the predetermined number in the preceding time 
period. "This information is useful as an aid in determining the cause or root (i.e., 
systemic root cause) of these events as such would otherwise be difficult to determine," 
(line 67 of column 2 through line 3 of column 4 in Andersen). It is for this reason that 
one of ordinary skill in the art at the time of the applicant's invention would have been 
motivated to add a recurring event log entry to the event log display, the recurring event 
log entry corresponding to the event, when (i) the event does not already have recurring 
event status and (ii) the number of preceding equivalent events is greater than the 
predetermined number in the preceding time period in the system as taught by Bell. 
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Bell does not explicitly teach: maintaining the event log display by excluding an 
indication of the event from the event log display when (i) the event corresponds to an 
already recurring event and (ii) the number of preceding equivalent events is greater 
than the predetermined number in the preceding time period. However, Andersen 
discloses: "For each such event that is detected by the intelligent electronic device the 
systemic fault detection algorithm logs the occurrence of the event. Optionally, the 
algorithm may also log the date and time of the event. The algorithm determines if this 
particular fault type (or event type) has occurred before (e.g., the same type of fault on 
the same phase). If such a fault has occurred before, the time since the last such fault 
occurrence and the total number of such fault type occurrences are determined. This is 
then compared against the user-input number of events and/or time frequency specified 
to merit the generation of a repeat event," (lines 8-18 of column 2). It would have been 
obvious for one of ordinary skill in the art at the time of the applicant's invention to 
maintain the event log display by excluding an indication of the event from the event log 
.display when (i) the event corresponds to an already recurring event and (ii) the number 
of preceding equivalent events is greater than the predetermined number in the 
preceding time period. Meriting the generation of a repeat event (line 18 of column 2 in 
Andersen) is where motivation lies for this determination and logging of the event as a 
normal event. It is for this reason that one of ordinary skill in the art at the time of the 
applicant's invention would have been motivated to maintain the event log display by 
excluding an indication of the event from the event log display when (i) the event 
corresponds to an already recurring event and (ii) the number of preceding equivalent 
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events is greater than the predetermined number in the preceding time period in the 
system as taught by Bell. 

Bell does not explicitly teach: SNMP events. The combination of Bell and 
Andersen teach all of the limitations of the instant application with regards to generic 
events, and the examiner contends that the type of event is arbitrary. In any case, Vaid 
discloses: "Alarms and notifications can also be specified, in order to determine which 
events will trigger an alarm, at what threshold, and in what form e.g. email notification, 
pager message, SNMP trap, log entry and so on," (lines 52-55 of column 27). It would 
have been obvious to one of ordinary skill in the art at the time of the applicant's 
invention to include SNMP events. "Additionally, the directory access interfaces with 
management stations network services 181 1 through SNMP," (lines 3-5 of column 27 in 
Vaid). It is for this reason that one of ordinary skill in the art at the time of the applicant's 
invention would have been motivated to include SNMP events in the system as taught 
by Bell and Andersen. 

b. Regarding claim 4, Bell does not explicitly teach: adding a time stamp to 
the event data of the recurring event, the time stamp indicating the time of the 
subsequent occurrence of the event condition. However, Andersen discloses: 
"Optionally, the algorithm may also log the date and time of the event," (lines 10-1 1 of 
column 2). It would have been obvious to one of ordinary skill in the art at the time of the 
applicant's invention to add a time stamp to the event data of the recurring event, with 
the time stamp indicating the time of the subsequent occurrence of the event condition. 
"The algorithm determines if this particular fault type (or event type) has occurred before 
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(e.g., the same type of fault on the same phase). If such a fault has occurred before, the 
time since the last such fault occurrence and the total number of such fault type 
occurrences are determined. This is then compared against the user-input number of 
events and/or time frequency specified to merit the generation of a repeat event," (lines 
1 1 -1 8 of column 2 in Andersen). It is for this reason that one of ordinary skill in the art at 
the time of the applicant's invention would have been motivated to add a time stamp to 
the event data of the recurring event, with the time stamp indicating the time of the 
subsequent occurrence of the event condition in the system as taught by Bell. 

c. Regarding claim 5, Bell teaches: the preceding time period is an 
immediately preceding time period (abstract and lines 45-62 of column 1). 

d. Regarding claim 8, Bell teaches: receiving network management data 
relating to an event condition (lines abstract and 15-24 of column 1); and determining 
whether the monitored characteristic for the event condition is in a recurring state, and 
processing the data according to whether the monitored characteristic for: the event 
condition is in a recurring state (abstract and lines 15-62 of column 1). 

e. As per claim 12, Bell does not explicitly teach: adding the time of the 
received data relating to the event condition to event data of the event in the recurring 
state. However, Andersen discloses: "Optionally, the algorithm may also log the date 
and time of the event," (lines 10-1 1 of column 2). It would have been obvious to one of 
ordinary skill in the art at the time of the applicant's invention to add the time of the 
received data relating to the event condition to event data of the event in the recurring 
state. "The algorithm determines if this particular fault type (or event type) has occurred 
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before (e.g., the same type of fault on the same phase). If such a fault has occurred 
before, the time since the last such fault occurrence and the total number of such fault 
type occurrences are determined. This is then compared against the user-input number 
of events and/or time frequency specified to merit the generation of a repeat event," 
(lines 1 1-18 of column 2 in Andersen). It is for this reason that one of ordinary skill in 
the art at the time of the applicant's invention would have been motivated to add the 
time of the received data relating to the event condition to event data of the event in the 
recurring state in the system as taught by Bell. 

f. Regarding claim 13, Bell teaches: generating an event for presentation in 

- the event log to the user when it is determined that the event condition has not occurred 
more than the first predetermined number of times in the first immediately preceding 
time period (abstract and lines 15-62 of column 1). 

g. Regarding claim 14, Bell teaches: the generated event is not a recurring 
event (abstract and lines 34-50 of column 2). 

h. Regarding claim 15, Bell teaches: wherein if it is determined that the 
monitored characteristic for the event condition is not in a recurring state, the method 
further comprises determining whether a second predetermined number of equivalent 
events have been generated in a second preceding time period (line 51 of column 2 
through line 12 of column 3). 

i. Regarding claim 16, Bell teaches: generating an event for presentation in 
the event log to the user when it is determined that the event condition has not occurred 
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more than the first predetermined number of times in the first immediately preceding 
time period (abstract and lines 15-62 of column 1). 

j. Regarding claim 17, Bell does not explicitly teach: preventing a 
subsequent event from being presented in the event list to the user following a 
subsequent occurrence of the event condition. However, Andersen discloses: "A limit 
may be set as to how many repeats should be observed before a repeat event/message 
is generated. Similarly a limit may be programmed in as to how many repeat 
events/messages should be generated regardless of the number of observations 
made," (lines 58-62 of column 3). It would have been obvious to one of ordinary skill in 
the art at the time of the applicant's invention to prevent a subsequent event from being 
presented in the event list to the user following a subsequent occurrence of the event 
condition. "This information is useful as an aid in determining the cause or root (i.e., 
systemic root cause) of these events as such would otherwise be difficult to determine," 
(line 67 of column 3 through line 3 of column 4 in Andersen) and "By identifying 
repeating fault events automatically, these systemic fault conditions may be predicted, 
detected, and corrected before a major fault event occurs," (lines 16-19 of column 4 in 
Andersen). It is for these reasons that one of ordinary skill in the art at the time of the 
applicant's invention would have been motivated to prevent a subsequent event from 
being presented in the event list to the user following a subsequent occurrence of the 
event condition in the system as taught by Bell. 

k. Regarding claim 18, Bell does not explicitly teach: adding a time stamp to 
the event data of the recurring event, the time stamp indicating the time of the 
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subsequent occurrence of the event condition. However, Andersen discloses: 
"Optionally, the algorithm may also log the date and time of the event," (lines 10-1 1 of 
column 2). It would have been obvious to one of ordinary skill in the art at the time of the 
applicant's invention to add a time stamp to the event data of the recurring event, with 
the time stamp indicating the time of the subsequent occurrence of the event condition. 
"The algorithm determines if this particular fault type (or event type) has occurred before 
(e.g., the same type of fault on the same phase). If such a fault has occurred before, the 
time since the last such fault occurrence and the total number of such fault type 
occurrences are determined. This is then compared against the user-input number of 
events and/or time frequency specified to merit the generation of a repeat event," (lines 
11-18 of column 2 in Andersen). It is for this reason that one of ordinary skill in the art at 
the time of the applicant's invention would have been motivated to add a time stamp to 
the event data of the recurring event,, with the time stamp indicating the time of the 
subsequent occurrence of the event condition in the system as taught by Bell. 

I. Regarding claim 19, Bell teaches: generating an event for presentation in 
the event log to the user when it is determined that the event condition has not occurred 
more than the first predetermined number of times in the first immediately preceding 
time period (abstract and lines 15-62 of column 1). 

m. Regarding claim 20, Bell teaches: the first and/or second preceding time 
period is an immediately preceding time period (abstract and lines 45-62 of column 1). 
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Response to Arguments 

4. Applicant's arguments filed 05 February 2007 have been fully considered but 
they are not persuasive. 

5. The applicant's arguments all pertain to newly claimed subject matter which has 
been addressed in the rejections above. 

Conclusion 

6. The prior art made of record and not relied upon is considered pertinent to 
applicants disclosure. 

Black et al. (U.S. 7,143,153 B1) discloses SNMP event traps. 
Nodoushani et al. (U.S. 7,164,694 B1) discloses gateway protocol mediation and 
SNMP traps. 

Sanghvi et al. (U.S. 7,171,459 B2) discloses event handling and SNMP traps. 

Sim et al. (U.S. 7,177,270 B2) discloses minimizing network congestion during 
large payload delivery and SNMP traps. 

Pillai et al. (U.S. 7,181,519 B2) discloses distributed monitoring and control and 
SNMP traps. 

Copeland, III (U.S. 7,185,368 B2) discloses detection of network intrusions and 
SNMP trap messages. 
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7. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Michael Meucci at (571) 272-3892. The examiner can 
normally be reached on Monday-Friday from 9:00 AM to 6:00 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Andrew Caldwell, can be reached at (571) 272-3868. The fax phone 
number for this Group is 571-273-8300. 

Communications via Internet e-mail regarding this application, other than those 
under 35 U.S.C. 132 or which otherwise require a signature, may be used by the 
applicant and should be addressed to [michael.meucci@uspto.gov]. 

All Internet e-mail communications will be made of record in the application file. 
PTO employees do not engage in Internet communications where there exists a 
possibility that sensitive information could be identified or exchanged unless the record 
includes a properly signed express waiver of the confidentiality requirements of 35 
U.S.C. 122. This is more clearly set forth in the Interim Internet Usage Policy published 
in the Official Gazette of the Patent and Trademark on February 25, 1997 at 1195 OG 
89. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
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have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 
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PRIMARY EXAMINER 



